Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/h5xMmHJIQ18MC-nZbGvk3XAxBFw.roa
File: h5xMmHJIQ18MC-nZbGvk3XAxBFw.roa (raw, json)
Hash identifier: bd/MgklYWc//AQaeTwtIa6Qk2JhJAl+exhpYJup/MGo=
Subject key identifier: 87:9C:4C:98:72:48:43:5F:0C:0B:E9:D9:6C:6B:E4:DD:70:31:04:5C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C73A31441CB259B95A23B82A15FE15583
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/h5xMmHJIQ18MC-nZbGvk3XAxBFw.roa
Signing time: Thu 19 Feb 2026 02:03:13 +0000
ROA not before: Thu 19 Feb 2026 02:03:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213282
IP address blocks: 2a06:9801:52::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:73:a3:14:41:cb:25:9b:95:a2:3b:82:a1:5f:e1:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 19 02:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=879c4c987248435f0c0be9d96c6be4dd7031045c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:7b:6f:cd:03:70:33:6d:82:7e:54:a3:2e:
75:88:ed:11:58:bc:2c:ec:c0:7c:77:b0:ed:8d:bc:
3c:6a:f5:08:52:88:1e:ba:ee:39:94:bc:e4:0b:24:
eb:57:bc:f1:7a:2f:2e:20:aa:5e:a5:86:e7:ae:ea:
0a:97:15:6c:81:49:6b:c1:89:1e:87:c9:1a:d9:47:
24:f8:e0:a2:0d:0e:82:36:32:1c:2c:d7:9d:f7:a3:
f9:3a:c0:0f:32:63:f4:60:11:c0:4b:74:f7:3d:c1:
51:64:b6:4f:0b:a1:8d:3c:05:05:e3:e7:11:b1:92:
28:14:23:24:fd:c3:8e:d3:85:a7:df:81:da:23:e5:
34:2a:d2:2f:7e:a4:c9:2a:ab:7a:f9:6e:61:99:6b:
fa:76:59:00:24:0c:03:73:75:94:53:ff:96:8f:98:
92:1d:ba:f9:90:1a:e9:3d:30:d4:bf:0b:3d:b8:f0:
23:f3:c7:ac:3b:92:d9:64:58:3c:ac:07:c1:f9:ee:
cb:63:ec:94:75:3e:61:f7:31:8a:fe:40:39:0d:48:
f3:75:f9:89:d4:b5:e9:72:f5:ac:e9:1d:0d:e5:eb:
63:dc:ff:88:dd:8a:ed:6a:e6:23:52:d6:1b:46:cb:
25:30:9a:38:4e:a7:aa:1b:68:34:b0:46:23:23:e3:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:4C:98:72:48:43:5F:0C:0B:E9:D9:6C:6B:E4:DD:70:31:04:5C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/h5xMmHJIQ18MC-nZbGvk3XAxBFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:52::/48
Signature Algorithm: sha256WithRSAEncryption
4f:7f:2c:2d:d2:81:c9:53:eb:64:e4:e0:98:2c:e9:31:8c:bf:
0c:ad:ea:3f:7e:87:3a:d1:8f:a0:44:94:e5:a5:be:5a:67:a4:
e9:67:e8:a7:06:ab:05:81:29:ec:95:ff:2b:0a:96:b8:d9:3c:
83:ca:14:19:ca:47:8a:00:e7:66:18:53:bf:d9:91:c3:23:a6:
b8:e4:ae:f9:01:c1:b6:9e:07:f6:23:6c:e3:47:3d:80:40:f4:
68:ad:81:d0:1f:42:d2:d0:f0:e5:90:bc:a4:d1:2f:04:e1:aa:
8f:36:91:eb:21:a7:92:cc:dc:b2:dc:76:64:6e:3c:e2:bc:6f:
56:da:9b:5a:19:ac:a8:81:60:a9:4c:23:77:3d:73:76:ce:3b:
88:3a:2b:07:52:79:0a:ce:47:4f:c6:bd:67:ff:e4:d3:22:12:
92:d2:0b:78:90:3c:be:7b:86:2b:73:e3:b5:1a:2d:57:77:f8:
81:c2:b5:e6:27:13:46:99:65:47:0b:90:b5:62:8c:03:9f:39:
eb:62:6f:a0:3b:a2:98:17:3f:3d:1d:59:ed:cd:91:0d:3c:7d:
fa:c7:4b:32:e6:ab:79:5b:aa:6b:bf:50:26:7d:8f:ea:4f:13:
2b:72:62:9c:9d:7e:d4:ad:b2:3f:64:62:43:23:77:7f:bb:60:
23:60:60:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:32:37 2026 by rpki-client